mybtc-se[.]pages[.]dev

Analysis of the domain mybtc-se.pages.dev shows a newly registered (April 24, 2026) site hosted on Cloudflare Pages that resolves to IP 188.114.97.3, a Cloudflare edge location in Canada. The site presents a page titled "Bitcoin Wallet Tracker - Live Value Calculator" and is classified as a crypto drainer that impersonates the Bitcoin brand. Infrastructure indicators include a Google Trust Services SSL certificate, HTTP status 200, and a Gridinsoft trust score of 0/100, suggesting a lack of reputation. The domain appears on one security blocklist and is actively blocked by PhishDestroy, confirming that threat intelligence sources have identified it as malicious. VirusTotal reports that the URL was scanned by 94 vendors without any detections, but this absence of flags does not constitute a safety assurance. Current evidence points to a brand‑impersonation campaign designed to lure cryptocurrency users into disclosing wallet information or initiating transfers. Defenders should add mybtc-se.pages.dev to URL filtering and endpoint deny lists, monitor outbound connections to the associated IP, and enforce strict controls on any user‑initiated cryptocurrency transactions. Continuous threat‑intel monitoring is advised to detect any evolution of the campaign or emergence of additional infrastructure linked to this actor.